3 ms·
I dont understand how is it possible that browser would allow crossdomain request from attacker website to victim website? Unless victim has some CORS headers a
by forcer 11y ago
I dont understand how is it possible that browser would allow crossdomain request from attacker website to victim website? Unless victim has some CORS headers allowing all sites to query it?
- slipstream- 11y agoWouldn't the browser still make the request even with the CORS headers, because the server needs to send such headers?